Privacy policy

01Who processes the data

Personal data controller: operator: full name or sole proprietor, tax ID, email support@astros.nz.

02What data we collect

The birth data the calculations rely on: your name at birth, date, time, and place of birth, gender, the city where you currently live, and what you are interested in.

Sign-in data: your email and password (only its hash is stored), or your Telegram numeric ID, name, and @username.

What you do in astros: your questions to Astros and its answers, plans, “did the day match” marks, morning and evening settings, and Astros+ status.

Data about people close to you, if you add them. You may add them only with their consent.

Technical data: the sign-in cookie and your IP address. The IP address is used only to protect against abuse and is not written to the database.

03Why we use it

To calculate your chart and calendar and to answer your questions.

To make sure that only you can access your account.

To send the morning forecast and the evening question in Telegram, if you turn them on.

To record Astros+ payments.

To improve astros based on anonymized statistics: how many people open the morning message, reply in the evening, and so on.

04How we protect it

Your name at birth and date of birth are encrypted with the application key (AES-GCM): they cannot be read from the database without this key.

Passwords and sign-in tokens are stored only as hashes.

Data is stored on a server: storage location: country, hosting provider.

05Who we share it with

We do not sell data and do not show ads.

To answer your questions, the question and the chart data needed for the answer are sent to the AI model provider (Anthropic, USA) so that it can generate the answer.

The bot, the Telegram Mini App, and payments run through Telegram: Telegram processes that part of the data under its own rules.

Emails with sign-in and password reset codes are sent through the Resend email service (processing in the EU): it receives only the email address and the text of the email. We store not the code itself but its hash.

Data may also be disclosed in response to a lawful request from government authorities.

06How long we keep it

For as long as you have an account.

Deleting your account in your profile erases your profile and birth data, charts, calendar, conversations with Astros, plans, marks, and sessions. Payment records remain, no longer linked to you, because accounting requires them.

07Your rights

You can find out what data we store, correct it (birth data can be edited in your profile), delete your account, or withdraw your consent. If something cannot be done in your profile, write to us at the contact above.

08Cookies

astros sets only the cookies it cannot work without: a sign-in cookie (for 30 days) and a temporary cookie for signing in through Telegram (for 5 minutes). There are no advertising or third-party cookies.

09Changes

A new version of this policy is published on this page with its date. We will announce important changes in the service in advance.